Does Change Auditor parse the Windows Security Event log on the Domain Controllers
说明
To capture AD Audit data, does CA use the Security Event log on the DCs?
原因
N/A
解决办法
Change Auditor does not use the Security Event logs. CA hooks directly into the LSASS process and collects the Audit data before it is written to the Event log by LSASS.
